CVE-2009-0354: XSS
Cross-domain vulnerability in js/src/jsobj.cpp in Mozilla Firefox 3.x before 3.0.6 allows remote attackers to bypass the Same Origin Policy, and access the properties of an arbitrary window and conduct cross-site scripting (XSS) attacks, via vectors involving a chrome XBL method and the window.eval function.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0354?
CVE-2009-0354 is considered to have a medium severity due to its potential for cross-site scripting (XSS) attacks.
How do I fix CVE-2009-0354?
To fix CVE-2009-0354, upgrade Mozilla Firefox to version 3.0.6 or later.
What types of attacks can be executed using CVE-2009-0354?
CVE-2009-0354 allows attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks.
Which versions of Mozilla Firefox are affected by CVE-2009-0354?
CVE-2009-0354 affects Mozilla Firefox versions 3.0, including alpha and beta versions up to 3.0.5.
What is the main issue caused by CVE-2009-0354?
The main issue caused by CVE-2009-0354 is the ability to access properties of an arbitrary window, leading to security vulnerabilities.